$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7cac82f-3863-323a-9d90-9d5df16a467f.roa File: c7cac82f-3863-323a-9d90-9d5df16a467f.roa (raw, json) Hash identifier: s3iE4S11jRnMcbLHuGadrFz+r6Fefx4IJio2BPfG6T4= Subject key identifier: 65:6B:C2:D8:8F:A5:81:CC:DE:BE:29:D5:AA:E2:66:7B:80:2E:4E:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD0BED520F87076F5A6700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7cac82f-3863-323a-9d90-9d5df16a467f.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 63949 IP address blocks: 172.234.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0b:ed:52:0f:87:07:6f:5a:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=95e4974b-d80e-47d6-8a21-842d03323f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:70:08:8a:e4:ba:39:6a:da:18:ce:82:fc: d0:31:bf:05:71:a2:16:f4:62:fd:a5:0a:47:60:a2: 3d:ed:f9:91:b0:f4:30:80:8c:77:c3:8b:9c:fb:76: f2:14:0f:76:95:b0:4a:fe:5f:5a:d3:9d:e2:a0:f3: 71:b0:c4:ab:18:d7:db:50:90:92:79:dc:cc:48:af: 88:2f:a0:a7:bc:05:7d:bb:a6:fe:df:b8:e3:3f:20: 5f:d0:2a:5a:78:ff:2f:d4:f8:c2:9e:3d:43:54:34: 35:be:ae:9b:d0:d1:0f:4c:2e:db:1a:36:3f:d3:fe: 8a:28:ba:23:7d:83:70:36:50:34:2e:2c:3a:3f:83: a7:b8:6f:c8:6f:78:45:94:80:dc:1a:7f:f3:4b:5c: 60:35:0f:06:58:d5:fb:7b:53:d5:91:73:ff:59:39: 0a:e0:1b:5a:21:8b:20:29:2c:1a:83:92:70:a7:ce: 3d:f0:e8:c2:cf:e9:e8:e5:9d:0c:21:b8:8b:f9:09: 51:ee:4e:16:48:09:c7:bd:ea:f2:bb:79:ae:ca:2d: 34:21:35:d8:5c:34:66:ed:a1:1a:68:85:a2:21:c8: b2:d5:5a:49:7e:c7:09:7b:aa:87:04:cf:37:d0:9a: 06:65:e8:ad:06:4a:b3:15:3f:31:55:ca:57:7d:b2: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6B:C2:D8:8F:A5:81:CC:DE:BE:29:D5:AA:E2:66:7B:80:2E:4E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7cac82f-3863-323a-9d90-9d5df16a467f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c6:40:09:bc:d9:ef:2f:b0:36:07:dc:b2:5d:9b:1e:d1:e5: 23:da:4c:45:81:36:0e:a7:81:1e:83:61:cf:00:a8:d6:ae:48: 12:ad:c1:6f:0f:7c:8b:08:70:ca:8e:31:69:6d:2f:7a:37:42: 1f:0d:86:bc:55:84:ae:c6:09:62:eb:18:83:99:fc:cb:7e:fc: 2f:be:5a:0b:12:70:34:62:1f:c3:ad:3a:71:a9:bb:b4:f1:4d: 9b:a4:f1:88:d4:a7:ef:02:4f:fe:8d:a5:9e:8f:cb:4a:c6:ec: 2b:99:0c:0e:bf:55:94:cc:e1:c7:e3:1a:fe:ec:3b:dd:ec:26: 45:1f:35:73:8f:56:61:ea:9e:b1:c4:a1:69:83:26:32:27:06: 39:41:3e:98:b9:c8:d2:b8:ac:08:07:36:1b:0c:4c:bd:38:b8: f1:12:e2:79:23:ce:5a:54:ad:cd:4b:37:d0:0a:ef:9b:81:50: 38:08:4d:97:0b:0f:01:bc:9b:7e:ea:fd:b3:b9:0a:5e:f7:08: 50:76:5e:24:9c:26:ba:ba:54:4f:f5:b4:15:77:a9:37:00:e6: c4:34:e1:e0:77:59:ee:b4:c4:20:4c:29:2d:82:7a:9f:a0:32: f5:46:10:67:1a:63:c2:a6:2f:b6:f8:e6:a6:b2:fa:9a:90:01: 3b:7d:95:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QvtUg+HB29aZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OTVlNDk3NGItZDgwZS00N2Q2LThhMjEtODQyZDAzMzIzZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7hwCIrkujlq2hjOgvzQMb8FcaIW9GL9pQpH YKI97fmRsPQwgIx3w4uc+3byFA92lbBK/l9a053ioPNxsMSrGNfbUJCSedzMSK+I L6CnvAV9u6b+37jjPyBf0CpaeP8v1PjCnj1DVDQ1vq6b0NEPTC7bGjY/0/6KKLoj fYNwNlA0Liw6P4OnuG/Ib3hFlIDcGn/zS1xgNQ8GWNX7e1PVkXP/WTkK4BtaIYsg KSwag5Jwp8498OjCz+no5Z0MIbiL+QlR7k4WSAnHveryu3muyi00ITXYXDRm7aEa aIWiIciy1VpJfscJe6qHBM830JoGZeitBkqzFT8xVcpXfbJUsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVrwtiPpYHM3r4p1ariZnuALk4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdjYWM4MmYtMzg2My0z MjNhLTlkOTAtOWQ1ZGYxNmE0NjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrOoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvGQAm82e8vsDYH3LJdmx7R5SPaTEWBNg6ngR6DYc8AqNauSBKtwW8P fIsIcMqOMWltL3o3Qh8NhrxVhK7GCWLrGIOZ/Mt+/C++WgsScDRiH8OtOnGpu7Tx TZuk8YjUp+8CT/6NpZ6Py0rG7CuZDA6/VZTM4cfjGv7sO93sJkUfNXOPVmHqnrHE oWmDJjInBjlBPpi5yNK4rAgHNhsMTL04uPES4nkjzlpUrc1LN9AK75uBUDgITZcL DwG8m37q/bO5Cl73CFB2XiScJrq6VE/1tBV3qTcA5sQ04eB3We60xCBMKS2Cep+g MvVGEGcaY8KmL7b45qay+pqQATt9lcY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:47 2025 by rpki-client